Heartbleed...?

[Luis R. Ramos]

Errr, NHQ is warning us about an "open SSL Heartbleed..."
But they neglected to inform us what is that. Is that a virus? A Trojan? Or what? Security leak...?



Excuse the lack of knowledge on this issue.



I can guess about what this is, using the office where it came from, IT. But I would appreciate more info...



Thanks,

Flyer

[Eclipse]

If you click-through the eServices RSS notice, there are links to information:
https://www.capnhq.gov/news/news11Apr14.htm
"IT Security is of the utmost importance to our members. Due to the "Heartbleed" OpenSSL CVE 2014 0160 vulnerability, we have reviewed all systems to identify any vulnerability, and we are pleased to report that no known security implications have been found. For more information on how to protect yourself against Heartbleed, visit http://www.zdnet.com/how-to-protect-yourself-in-heartbleeds-aftershocks-7000028311/. You may also go to https://www.ssllabs.com/ssltest/ and enter your commonly used website to check if they are secure.

Joseph Hall, Jr.
Deputy Director of Information Technology"


http://www.cnet.com/how-to/which-sites-have-patched-the-heartbleed-bug/

It's a bug in the way encryption keys are handled on web sites.

I would have been surprised if NHQ >was< affected as it's in open-source implementations
of SSL and the government doesn't use those.

[dwb]

[PHall]

Errr, NHQ is warning us about an "open SSL Heartbleed..."
But they neglected to inform us what is that. Is that a virus? A Trojan? Or what? Security leak...?



Excuse the lack of knowledge on this issue.



I can guess about what this is, using the office where it came from, IT. But I would appreciate more info...



Thanks,

Flyer

Have you watched or listened to a news program in the past week or so?  They've been all over it.

[JeffDG]

Have you watched or listened to a news program in the past week or so?  They've been all over it.

It's being blamed for the Malaysian Airlines disappearance now?  If not, CNN is ignoring it.

[JeffDG]

The best and most concise explanation I've seen!

Link to the full size:
http://xkcd.com/1354/

[PHall]

Have you watched or listened to a news program in the past week or so?  They've been all over it.

It's being blamed for the Malaysian Airlines disappearance now?  If not, CNN is ignoring it.

I said NEWS.    CNN, Fox and CNBC aren't news channels anymore, they're entertainment channels.